CVE-2015-0822

CVE-2015-0822 affects Mozilla Firefox (before 36.0) and Thunderbird (before 31.5). The flaw is in the Form Autocompletion feature, where crafted JavaScript can cause a remote attacker to read arbitrary local files. Public entries in multiple advisories confirm affected products and versions (Fire...

CVE-2015-0831

CVE-2015-0831 describes a use-after-free in Mozilla Firefox (mozilla::dom::IndexedDB::IDBObjectStore::CreateIndex) that could allow remote code execution or denial of service via crafted IndexedDB index content. Affected products include Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thun...

CVE-2015-0827

CVE-2015-0827 : A heap-based buffer overflow in mozilla::gfx::CopyRect within Mozilla Firefox before 36.0, Firefox ESR 31.x before 31.5, and Thunderbird before 31.5 could allow a remote attacker to read from uninitialized memory via a malformed SVG graphic, leading to possible information disclos...

CVE-2015-0833

CVE-2015-0833 affects Mozilla Firefox (pre-36.0), Firefox ESR (pre-31.x up to 31.5), and Thunderbird (pre-31.5) on Windows. It is a local privilege-escalation via untrusted search paths where a Trojan horse DLL (e.g., bcrypt.dll) in the current working directory or a temporary directory is loaded...

CVE-2015-0836

CVE-2015-0836 involves multiple memory-safety vulnerabilities in the Mozilla Firefox browser engine and related Thunderbird components. Affected products/versions include Firefox up to 36.0, Firefox ESR up to 31.x before 31.5, and Thunderbird up to 31.5. The flaws allow remote attackers to cause ...